CTC Union SHDSL Manual de usuario

USER MANUAL SHDTU03b G.SHDSL.bis Bridge/Router Modems. CTC Union Technologies Co., Ltd.

10 Security ¾ DMZ host/Multi-DMZ/Multi-NAT function ¾ Virtual server mapping (RFC1631) ¾ VPN pass-through for PPTP/L2TP/IPSec tunneling ¾ Natural

11 ¾ LAN: 1, 2, 3, 4 (4-port router) ¾ SHDSL.bis: ALM Physical/Electrical ¾ Dimensions: 18.7 x 3.3 x 14.5cm (WxHxD) ¾ Power: 100~240VAC (via powe

12 2 Your Firewall A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in dat

13 Level 5: ApplicationLevel 4: TCPLevel 3: IPLevel 2: Data LinkLevel 1: PhysicalProtocolSource/Destination addressSource/destination portIP opt

14 Internet192.168.0.10:1025192.168.0.11:4406192.120.8.5FirewallInternal/Protected Network External/Unprotected NetworkPAT (Port Address Translation)

15 Level 5: ApplicationLevel 4: TCPLevel 3: IPLevel 2: Data LinkLevel 1: PhysicalTelnetFTPHttpSMTP Host PCProxy ServerPublic ServerRequest Page

16 Normal reassembled Packetsbytes from 1~1500 bytes from 1501~3000 bytes from 3000~4500Reassembled teardrop packetsbytes from 1~1700bytes from 1300~

17 3 Your VLAN (Virtual Local Area Network) Virtual LAN (VLAN) is defined as a group of devices on one or more LANs that are configured so that the

18 carry user priority information across bridged LANs in which individual LAN segments may be unable to signal priority information (e.g., 802.3/Eth

19 PO W ERFAULTDATA AL AR MLAN 1 LAN 2 LAN 3 LAN 4WAN 1WAN 2WAN 3WAN 4 WAN 5WAN 6WAN 7WAN 8BackboneAT MSwitchVID 30VID 10SHDSLRouterVID 20VID 20VID 1

20 4 Getting To Know Your Router This section will introduce hardware of the router. 4.1 Front Panel The front panel contains LED which show statu

21 4.2 Rear Panel The rear panel of SHDSL.bis router is where all of the connections are made. Connectors Description of 2-wire/1-port router DC-

22 4.3 SHDSL.bis Line Connector 4.4 Console Cable Pin Number Description Fuigure 1 No connection 2 RxD (O) 3 TxD (I) 4 No connection 5 GND 6 N

23 5 Configuration of the router This guide is designed to lead users through Web Configuration of G.shdsl.bis Router in the easiest and quickest w

24 The difference Protocol need to setup difference WAN parameters. After knowing the Ptorocol provided by ISP, you have to ask the necessary WAN par

25 Direct Connection with PC or NB for 1-port router Connection with Hub/Switch for 1-port router 4-port router with complex network topology PC NB

26 6 Configuration via Web Browser Step. 1 For Win85, 98 and Me, click the start button. Select setting and control panel. Step. 2

27 Choose IP address tab. Select Obtain IP address automatically. Click OK button. The window will ask you to restart the PC.

28 7 Basic Setup The Basic Setup contains LAN, WAN, Bridge and Route operation mode. User can use it to completely setup the router. After successfu

29 Enter Parameters in BASIC – STEP2: LAN IP: 192.168.0.1 Subnet Mask: 255.255.255.0 Gateway: 192.168.0.254 (The Gateway IP is provided by ISP.) Hos

CTC Union Technologies Co., Ltd. Far Eastern Vienna Technology Center (Neihu Technology Park) 8F, No. 60, Zhouzi St. Neihu, Taipei, 114 Taiwan Phone:

30 7.2 Routing Mode Routing mode contains DHCP server, DHCP client, DHCP relay, Point-to-Point Protocol over ATM and Ethernet and IP over ATM and Et

31 then 1. Lease time 72 hours indicates that the DHCP server will reassign IP information in every 72 hours. DNS Server: Your ISP will provide at l

32 7.2.4 PPPoE or PPPoA PPPoA (point-to-point protocol over ATM) and PPPoE (point-to-point protocol over Ethernet) are authentication and connectio

33 IP Type: Dynamics. The default IP type is Dynamic. It means that ISP PPP server will provide IP information including dynamic IP address when SH

34 7.2.5 IPoA or EoA PCVPI:0, VCI:33Encapsulation: LLCDSLAMISPBASIP: 192.168.0.1Netmask: 255.255.255.0LANWANIP: 10.1.2.1Netmask: 255.255.255.0Gatew

35 The screen will prompt the parameters that will be written in EPROM. Check the parameters before writing in EPROM.

36 8 Advanced Setup Advanced setup contains SHDSL.bis, WAN, Bridge, Route, NAT/DMZ, Virtual SERVER and FIREWALL parameters. 8.1 SHDSL.bis You can

37 The screen will prompt the parameters that will be written in EPROM. Check the parameters before writing in EPROM. Press Restart to restart th

38 IP and video comferencing, that require tightly constrained delays and delay variation. VBR-rt is characterized by a peak cell rate (PCR), substai

39 8.2 Bridge If you want to setup advanced filter function while router is working in bridge mode, you can use BRIDGE menu to setup the filter func

LEGAL The information in this publication has been carefully checked and is believed to be entirely accurate at the time of publication. CTC Union T

40 8.3 VLAN Virtual LAN (VLAN) is defined as a group of devices on one or more LANs that are configured so that they can communicate as if they wer

41 Port-Based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. Click Port-Bas

42 8.5 Route If the Router is connected to more than one network, it may be necessary to set up a static route between them. A static route is a pre

43 RIP Mode: this parameter determines how the product handle RIP (Routing information protocol). RIP allows it to exchange routing information with

44 8.6 NAT/DMZ NAT (Network Address Translation) is the translation of an Internet Protocol address (IP address) used within one network to a differ

45 Multi-NAT: Some of the virtual IP addresses (eg: 192.168.0.10 ~ 192.168.0.50) collectively use two of the global IP addresses (eg: 69.210.1.9 and

46 8.7 Virtual Server For example: Specific ports on the WAN interface are re-mapped to services inside the LAN. As only 69.210.1.8 (e.g., assigned

47 8.8 Firewall A firewall is a set of related programs that protects the resources of a private network from other networks. It is helpful to users

48 Click Automatic Firewall Security. This level enables basic firewall security, all DoS protection, and the SPI filter function. Press Finsih

49 resources to be consumed serving the phony requests. A ping of death attack attempts to crash your system by sending a fragmented packet, when re

TABLE OF CONTENTS 1. DESCRIPTIONS...9 1.1

50 If you want to ban all of the protocol from the IP (e.g.: 200.1.1.1) to access the all PCs (e.g.: 192.168.0.2 ~ 192.168.0.50) in the LAN, key in t

51 Internet34SMTP ClientSMTP Server172.16.1.1:1357 192.168.3.4:25Firewall Packet Direction Source Destination Protocol Dest. Port Action (Rul

52 2 10.1.99.1 172.16.6.1 Permit (A) 3 10.1.1.1 172.16.6.1 Permit (A) 4 10.1.1.1 172.16.1.1 Deny (C) 5 192.168.3.4 172.16.6.1 Deny (C) The r

53 Set the policy to action. Description: A brief statement describe this policy Local IP: type IP address of local host in prioritized session.

54 9 Administration This session introduces security and simple network management protocol (SNMP) and time synchronous. 9.1 Security For

55 Configured 0.0.0.0 will allow all hosts on Internet or LAN to access the router. Leaving blank of trust host list will cause blocking all PC from

56 SNMP status: Enable Access Right: Deny for deny all access Read for access read only Write for access read and write. Community: it

57 9.3 Time Sync Time synchronization is an essential element for any business, which relies on the IT system. The reason for this is that these sys

58 10 Utility This section will describe the utility of the product including: SYSTEM INFO: system information, CONFIG TOOL: load the factory defa

59 10.3 Upgrade You can upgrade the gateway using the upgrade function. Press Upgrade in UTILITY. Browse the file and press OK button

7.2.5 IPoA or EoA...34 8 ADVANCED SETUP...

60 11 Status You can monitor the SHDSL.bis status including mode, Tx power and Bitrate and Performance information including SNR margin, atteunation

61 12 LAN-to-LAN connection with bridge Mode 12.1 CO side Click Bridge and CO Side to setup Bridging mode of the Router and then click Next.

62 12.2 CPE Side Click Bridge and CO Side to setup Bridging mode of the Router and then click Next. Enter LAN Parameters IP: 192.168.0.2 Subn

63 13 LAN to LAN Connection with Routing Mode IP: 192.168.20.1Netmask: 255.255.255.0STU-C (CO)STU-R (CPE)RouterIP: 192.168.20.100Netmask: 255.255.25

64 IP Address: 192.168.20.1 Subnet Mask: 255.255.255.0 Gateway: 192.169.30.2 Click Next The screen will prompt the parameters that we will write

65 14 Configuration via Serial Console or Telnet with Menu Driven Interface 14.1 Serial Console Check the connectivity of the RS-232 cable from your

66 14.4 Window structure From top to bottom, the window is divided into four parts: 1. Product name 2. Menu field: Menu tree prompts on this fiel

67 14.5 Menu Driven Interface Commands Before changing the configuration, familiarize yourself with the operations list in the following table. The

68 EnableSetupStatusShowWriteRebootPingAdminUtilityExitUpgradeBackupRestoreUserSecuritySNMPPasswordIDSNTPClearModifyListAttribProfilePortIP_poolListM

69 14.7 Configuration To setup the router, move the cursor “ >>” to enable and press enter key. While the screen appears, type the supervisor

14.5 MENU DRIVEN INTERFACE COMMANDS ...67 14.6 MENU TREE...

70 14.8 Status You can view running system status of SHDSL.bis, WAN, route and interface via status command. Move cursor “ >> “ to status

71 14.9 Show You can view the system information, configuration and configuration in command script by show command. Move cursor “ >> “ to sh

72 14.10 Write For any changes of configuration, you must write the new configuration to EPROM using write command and reboot the router to take aff

73 14.11 Reboot To reboot the router, use reboot command. Move cursor to “ >> “ to write and press enter. --------------------------------

74 14.12 Ping Ping command will be used to test the connection of router. Move cursor “ >> “ to ping and press enter. --------------------

75 14.13 Administration You can modify the user profile, telnet access, SNMP (Sample Network Management Protocol), supervisor information and SNTP (

76 14.13.2 Security Security command can be configured sixteen legal IP address for telnet access and telnet port number. Move the cursor “ &

77 ---------------------------------------------------------------------- The screen will prompt as follow: >> edit Edit trap host paramet

78 time_server2 Configure time server 2 time_server3 Configure time server 3 updaterate Configure update period time_zone Configure G

79 Move the cursor to list and review the setting. 14.14 Utility There are three utility tools, upgrade, backup and restore, embedded in the firm

80 14.16 Setup All of the setup parameters are located in the subdirectories of setup. Move the cursor “ >> “ to setup and press enter. >

81 Generally, you cannot need to change SNR margin, which range is from 0 to 10. SNR margin is an index of line connection. You can see the actual S

82 minutes. Most of the ISP use dynamic IP for PPP connection but some of the ISP use static IP. Configure the IP type, dynamic or fixed, via ip_ty

83 14.16.5 VLAN Virtual LAN (VLAN) is defined as a group of devices on one or more LANs that are configured so that they can communicate as if they

84 tagged members. Use PVID command to change the member port to untagged members To assign PVID (Port VID), move the cursor “>>” to PVID and

85 You can add 20 sets of static route entry by using add command. Type the IP information of the static route including IP address, subnet mask and

86 14.16.8 LAN LAN interface parameters can be configured LAN IP address, subnet mask and NAT network type. >> address LAN IP address and s

87 Command: setup ip_share nat virtual range <1~5> <ip> <1~253> Message: Please input the following information. NAT local address

88 You can create up to 10 fixed NAT mapping entry via range command. ---------------------------------------------------------------------- Comma

89 Set the active interface number via interface command. You can configure the global port number by using port command. The local server, hos

9 1. Descriptions The SHDSL.bis (Symmetric High Speed Digital Subscriber Loop) routers comply with G.991.2(2004) standard with 10/100 Base-T auto-ne

90 There are three level of firewall which you can setup in this product. Level one, basic, only enables the NAT firewall and the remote managemen

91 dos_protection and press enter. >> syn_flood Enable protection SYN flood attack icmp_flood Enable protection ICMP flood attack udp_f

92 The add parameters of IPQoS can be configured via add command >> Protocol Configure protocol local_ip Configure local IP parameter

93 >> generic Configure generic DHCP parameters fixed Configure fixed host IP address list list Show DHCP configuration The gener

94 14.16.19 Host name Enter local host name via hostname command. Move cursor “ >> “ to hostname and press enter. -----------------------

Transmission Series CTC Union Technologies Co., Ltd. Far Eastern Vienna Technology Center (Neihu Technology Park) 8F, No